
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa
File: D65EFE0A91F711F087341C45C4F9AE02.roa (raw, json)
Hash identifier: /DGfu5IZwgqK2fcVU/zNOMsbLyKflPYKY+TO1byR3vA=
Subject key identifier: 83:CD:86:E9:83:DE:B2:A9:5F:72:3F:BC:43:33:93:57:D6:5F:AF:F0
Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial: 8D
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa
Signing time: Thu 11 Jun 2026 10:41:17 +0000
ROA not before: Thu 11 Jun 2026 10:41:17 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153929
IP address blocks: 2402:ea0::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Validity
Not Before: Jun 11 10:41:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2a90cd-3a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:e6:3f:2f:7a:8c:eb:ed:cc:4e:fe:11:5c:
c1:21:85:a9:40:6c:a8:ef:cc:96:aa:6a:30:4c:5d:
01:bb:a8:7c:44:39:fa:6b:23:27:e4:08:04:e2:de:
ea:8a:f2:43:82:e5:b4:5e:9c:bd:99:9e:93:02:2c:
1e:89:56:2c:86:8a:79:3b:70:aa:99:4e:92:59:1b:
07:80:88:eb:e1:0d:49:2c:d5:b6:61:d3:31:50:1e:
ff:4e:39:8b:0f:14:ac:e6:ae:99:ed:e7:db:9d:34:
08:01:d8:38:71:be:d6:25:57:cc:57:c4:21:b6:37:
79:a4:30:10:10:7d:31:d3:8d:6e:9b:89:71:44:06:
d2:96:50:a0:ac:23:69:a7:82:2a:d9:e2:ec:8d:d4:
ac:ac:9f:4c:78:d5:37:51:26:49:e3:99:ed:1c:c7:
4a:26:c9:75:e9:25:36:02:d3:e3:68:bf:71:2e:8d:
e3:be:4a:97:f6:f2:84:e0:06:33:49:53:c0:ab:ce:
77:95:aa:a6:30:87:e3:d2:3a:8f:62:dd:6f:86:ca:
0f:a4:93:03:67:4d:bc:cb:a7:35:85:c4:e9:ec:77:
1f:1a:89:e8:20:25:0e:76:13:b9:7c:6e:a3:b8:ac:
58:cf:56:97:4b:e4:65:e0:e3:bf:8f:f9:c5:47:94:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:86:E9:83:DE:B2:A9:5F:72:3F:BC:43:33:93:57:D6:5F:AF:F0
X509v3 Authority Key Identifier:
keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:ea0::/40
Signature Algorithm: sha256WithRSAEncryption
2a:7e:e4:7f:f9:cc:af:85:17:a5:b9:ba:7e:76:27:e6:3f:ef:
d2:3c:48:bf:7f:60:56:bb:43:87:53:cf:a6:35:a8:bf:20:26:
10:03:3d:9a:ac:33:07:ee:8c:e3:a4:3e:37:44:a1:d4:f8:69:
7c:e0:9b:10:6e:e6:ec:57:04:eb:2e:b7:67:36:e4:6b:be:a9:
47:82:40:da:1e:c8:09:88:42:9e:1f:ad:7e:33:11:04:3f:49:
57:5c:a8:a7:0a:f6:d3:b7:2f:1c:b2:0c:49:a0:5f:25:16:f4:
f7:39:5c:8a:df:69:c2:8c:4f:1a:ac:79:16:30:ee:16:d9:90:
bf:59:77:90:23:dd:01:0d:30:a8:f4:31:a6:a0:a8:fc:e4:bb:
91:82:1a:76:dd:95:11:07:07:e0:f5:e5:48:3d:41:7e:77:7b:
7f:5f:cc:a8:a6:f8:3a:57:89:7c:5a:4b:b9:a2:0a:ba:e5:47:
99:37:89:18:07:3e:db:98:64:f7:2c:8a:0e:08:e6:31:a8:80:
d5:47:cb:91:1d:f1:6f:e1:39:06:d9:e4:15:d3:a4:5f:23:2a:
99:f2:d5:0a:3b:c9:e0:14:f1:16:43:2f:b2:e1:4f:da:78:3d:
8f:22:65:a1:09:96:0d:7f:10:62:4f:45:e5:be:78:d6:25:5a:
5f:64:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:31 2026 by rpki-client